Function is_auth 

pub fn is_auth(err: &IntelError) -> bool

Is this a fatal auth failure (401/403)? §6 distinguishes it from all-down: an auth failure on every endpoint is a misconfig (exit 4 immediately), NOT a backoff-loop — masking a credential error as a transient outage would hide it.